god-security-cloud

Name: god-security-cloud
Availability: InStock
Author: ArdurAI

Audit AWS, Azure, and GCP configurations for security misconfigurations.

1|Updated Apr 23, 2026

Search Tags:#cloud security #misconfiguration detection #CSPM #cloud posture management #AWS security #Azure security #GCP security

Ready to run

npx skills add https://github.com/ArdurAI/god-skill-suite --skill god-security-cloud-ardurai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: god-security-cloud
Source: https://github.com/ArdurAI/god-skill-suite/tree/main/skills/god-security-cloud
Command: npx skills add https://github.com/ArdurAI/god-skill-suite --skill god-security-cloud-ardurai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, azcli, gcloud, python, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides comprehensive cloud security posture management, identifying and mitigating risks in cloud environments.

Core Features & Use Cases

CSPM: Continuously audits cloud configuration against security benchmarks like CIS, NIST, and SOC.
Misconfiguration Detection: Identifies common misconfigurations like publicly accessible storage and overly permissive security groups.
Attack Kill Chain Analysis: Analyzes cloud attack patterns and lateral movement techniques.
AWS-Native Security Services: Integrates with AWS GuardDuty, Security Hub, Config, CloudTrail, Macie, and Inspector.
Azure Defender for Cloud: Evaluates Azure infrastructure and provides recommendations.
GCP Security Command Center: Aggregates findings from GCP native scanners and third-party tools.
CIEM: Identifies "entitlement sprawl" issues like over-permissioned identities and stale access.
Data Exfiltration Detection: Detects patterns indicative of data exfiltration.

Quick Start

Use the god-security-cloud skill to scan your cloud infrastructure for security misconfigurations.

Frequently Asked Questions about god-security-cloud

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect cloud misconfigurations across AWS, Azure, and GCP?▼

Cloud misconfiguration detection is performed by continuously auditing configurations against CIS, NIST, and SOC benchmarks to identify risks like public storage and permissive security groups. This process evaluates AWS, Azure, and GCP environments to pinpoint exposure.

What is cloud security posture management and how does it identify entitlement sprawl?▼

Cloud security posture management continuously audits infrastructure configurations, while CIEM specifically identifies entitlement sprawl by detecting over-permissioned identities and stale access. This ensures cloud environments adhere to strict security benchmarks.

Can I use this skill to analyze cloud attack kill chains and detect data exfiltration?▼

Yes, this skill analyzes cloud attack kill chains by examining lateral movement techniques and detects data exfiltration patterns. It aggregates findings from native scanners like AWS GuardDuty and GCP Security Command Center to identify threats.

Do I need AWS, Azure, and GCP credentials to perform cloud posture management scans?▼

Yes, you must provide AWS, Azure, and GCP credentials to run cloud posture management scans. The skill relies on these credentials alongside installed command line tools like awscli, azcli, and gcloud to access and evaluate infrastructure.

What is the best way to integrate AWS-native security services with Azure Defender for Cloud?▼

Integration is handled by aggregating findings from AWS-native services like Security Hub and Macie alongside Azure Defender for Cloud recommendations. This provides a unified view of cloud security posture and misconfiguration risks across providers.

Why does CSPM report stale access and over-permissioned identities in my cloud environment?▼

CSPM reports these issues through Cloud Infrastructure Entitlement Management, which identifies entitlement sprawl caused by over-permissioned identities and stale access. Detecting these misconfigurations helps mitigate lateral movement and data exfiltration risks.